Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: Uh8Az39eWDkEWUXTTOYEFb0xDDB13PCja4cweWVP+To=
Subject key identifier: BB:CA:31:EC:E9:B7:96:76:68:69:30:40:05:47:CA:B8:07:6C:E1:69
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 019D389BE239FC5B73EB1E71FFE988E7A50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0E96
Signing time: Sun 29 Mar 2026 08:00:33 +0000
Manifest this update: Sun 29 Mar 2026 08:00:33 +0000
Manifest next update: Mon 30 Mar 2026 08:00:33 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: Nfen7hyLRNf3t/4fyH7XNxPfJz0cl2HGz6V4/0VDuhc=)
2: jjz54tPWsuXjHrsRR3lGh9uQu6o.roa (hash: 02vfAYgOdeQNaFi8ZY69MJehPQkiX3iDuuBOrYgPuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e2:39:fc:5b:73:eb:1e:71:ff:e9:88:e7:a5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Mar 29 08:00:33 2026 GMT
Not After : Mar 30 08:00:33 2026 GMT
Subject: CN=bbca31ece9b79676686930400547cab8076ce169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:0b:78:7a:84:10:f9:83:4e:f9:6d:84:23:
64:35:f7:05:ad:10:0e:df:b7:07:f3:f5:36:40:8c:
e3:c5:a7:a3:e2:a6:fa:1b:16:4a:55:d5:49:26:78:
31:83:01:7a:4e:8f:02:4c:8e:e9:3e:d1:ad:37:81:
f6:dd:1c:ff:b7:f6:c4:ef:47:4b:8a:e1:c0:98:aa:
f2:bd:10:d7:44:d1:a2:e3:a8:62:a8:26:b7:b3:aa:
07:26:85:24:f4:c5:1f:55:da:00:cf:39:6b:d0:a5:
4a:cc:cd:01:f8:6d:27:cb:c1:0e:54:c4:0b:46:6d:
06:ba:de:ea:91:27:3a:34:62:c8:89:df:62:4b:ca:
67:7a:7c:1a:6f:c4:0c:e0:02:37:d6:4c:a0:dd:46:
05:e3:43:eb:14:e1:11:57:6b:3f:ba:0c:de:57:86:
b0:3c:88:2f:8a:35:fa:9a:2d:9c:8a:c0:bb:55:98:
7d:7a:26:a3:63:6a:fc:53:33:19:27:cb:34:b7:5e:
81:82:be:9d:70:62:29:39:d2:1c:70:82:30:2c:20:
57:8b:0a:e2:ff:a5:9f:f4:7e:74:ed:c0:2e:43:3d:
db:8b:87:81:d6:0d:1f:0a:17:e8:fc:f3:26:03:c4:
45:b5:da:ea:12:9c:d3:80:4e:b5:13:97:f9:2c:2c:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CA:31:EC:E9:B7:96:76:68:69:30:40:05:47:CA:B8:07:6C:E1:69
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:70:f6:3a:c6:e3:f1:d0:20:82:aa:12:d4:c6:c7:bd:f4:57:
ab:be:ba:78:de:92:1b:89:6b:ac:bf:94:d7:bd:80:73:fb:df:
09:3b:48:a9:cf:df:24:99:b6:02:ce:f1:c5:f0:a8:cf:b0:b1:
ac:8c:19:40:84:49:31:8d:9c:b3:37:77:14:e1:a8:f6:1f:d2:
d5:60:9d:4a:7b:a7:de:f5:51:b7:ae:7f:4d:d1:5a:00:05:ae:
ef:dc:f4:e7:e2:54:fc:05:ec:19:fc:97:f5:77:67:09:df:8a:
db:fc:09:28:9c:45:14:1c:3d:0d:38:8c:af:22:51:0f:c7:b4:
34:58:fd:8c:0c:14:92:47:e5:66:50:11:40:1d:6a:49:fe:19:
94:52:41:bf:41:4d:d4:6e:5b:12:ca:6c:26:12:08:b7:dc:9e:
ed:c3:4b:b5:d6:03:cd:3f:87:a7:a1:c5:dd:aa:0e:ca:d6:c4:
76:aa:37:08:0a:63:18:7b:ee:4e:4e:02:a0:de:2a:b4:87:85:
6d:ba:de:1e:3c:5b:50:6f:e2:73:d7:5c:d8:ba:1c:ca:9e:26:
c9:7b:6c:2a:b0:f8:b1:14:56:5b:3b:0f:05:64:e6:53:d1:e8:
d5:ee:39:1a:45:47:a6:7b:82:22:f5:41:ed:41:fe:02:11:9d:
8f:32:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:59 2026 by rpki-client